CVE-2021-24562CWE-639

LifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR

published August 23, 2021

CVSS
—
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue, allowing students to see other student answers and grades

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01625 · 76.0th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2021-08-23T11:10Z
EPSS history
Timeline
  • 23 AUG 11:10Z
    LifterLMS < 4.21.2 - Access Other Student Grades/Answers via IDOR
    cvelistv5